Home / Companies / Cloudflare / Blog / Post Details
Content Deep Dive

Change the (S)Channel! Deconstructing the Microsoft TLS Session Resumption bug

Blog post from Cloudflare

Post Details
Company
Date Published
Author
Patrick R. Donahue
Word Count
2,493
Language
English
Hacker News Points
76
Summary

Microsoft products Internet Explorer and Edge were having trouble maintaining HTTPS sessions with a customer's website due to issues with the handling of TLS session tickets by the SChannel security package, which provides TLS functionality for many Microsoft applications. The problem was fixed after Cloudflare reported it to Microsoft, who then released software updates for affected platforms.